test.rar
- SHA256 053bab9dadc68c7f55193ba42fb88043ccf0a4d2b71c7f8ea5d01439d8da186f
Password
789798
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test.rar
Resource
win11-20250619-en
windows11-21h2-x64
61 signatures
900 seconds
General
- Target test.rar
- Size 329.0MB
- Sample251119-23mvmafv9c
- SHA256 053bab9dadc68c7f55193ba42fb88043ccf0a4d2b71c7f8ea5d01439d8da186f
- MD5 06658676c189fdfc884bb4e7deea768f
- SHA1 12c2f6b7636d979385cc6240572a52b557bf5abe
- SHA512 b158535338ebacab2a1ad23f76876bcd87ceb66a156ae6be7c860d036f9aa2e79868a80195e619166c610b7bfec82184c1e30646cec1d63e54429cd507f4891c
- SSDEEP 6291456:78qY8XP6j5T5AM9rQBQ2xpucC3KB7PomQVkX4TEJ1nCSIjtNfFUhCWrBwoJaPjOz:4qBir92acCcjCnEznCTNfFUPGl6NeW
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/test/Sheet rat v2.5.exe unpack001/test/Spyder Crypter.sfx.exe
File Explorer
-
test.rar.rar 329.0MB
-
test/JASON RAT v2.1.1.0.zip.zip 81.6MB
-
test/NeptuneRAT v5.3 Cracked.rar.rar 166.3MB
-
test/RPS420 RAT.zip.zip 42.9MB
-
RPS420 RAT/Flags/bt.png947B
-
test/Sheet rat v2.5.exe.exe 32.5MB
-
test/Spyder Crypter.sfx.exe.exe 6.0MB
test/JASON RAT v2.1.1.0.zip
- SHA256 1f7bbab1367950af734942bdd40190a6abdc9afe958facfd5a3f991a906a3e38
- MD5 5d3ca0bda26f68da26c5f3250a9aa458
- SHA1 e121b51a692d3fce106079d8650b7e0d3f7d0574
- SHA512 f9a190a04ad2b193625aed9a2dc1b83889bb94bd7d41914e9b90bbd04a62677bca964191beb3b5c68cc7761c30a5d45c4d23452db41c8b42547c663d807548fe
- SSDEEP 1572864:eewoRkuHqYwOQfkOK2xXskmMxe4GUN9DbqjyeTrFAHns9zr7l9wuGtS10KisUQiP:rRkuHqYiFXRxvrbGjyeT5AM9X7luu+mk
- MD5 SHA1 SHA512 SSDEEP
test/NeptuneRAT v5.3 Cracked.rar
- SHA256 10665ad1fd7ac92f753d445e486d8b723a2e5e5aea4684d379a04e33dbc3b337
- MD5 81abade734ca143323146264db7289a1
- SHA1 359b4416d51f1d068f7f77cadc53fca9d91dfefb
- SHA512 b544098c2e4f1f98dd05c86b332e9502dc1488493d4460b98c74b60f7d8b5d223023d5bf5da0edc23f5dd691e33d5a2069fcfce50589d8f93ec712ddabe780ad
- SSDEEP 3145728:rTCpaArfvKiQ87GPhWmBQVw2KdX4THWd02nd2II9C7uGCX7rkthIQetNfN3Y:rucC3KB7PomQVkX4TEJ1nCSIjtNfFY
- MD5 SHA1 SHA512 SSDEEP
Password
789798
test/RPS420 RAT.zip
- SHA256 569cfe6efbf01471bc38354c808571880a373caa08da42638abbbfe6c3d8c6d6
- MD5 c887c8ea786173997fb78a09d70c49be
- SHA1 faced25015361c5da0dc6259bc2890adfb51e636
- SHA512 418021ff7edf494bc90cdf41b205459cb1954d65e41709d6336895158145b719dfe8a4764f4510b86bef0c6690e00317c4473cc8356fb6870a3ea8586e288a03
- SSDEEP 786432:B/riL9XXkOAuMovlGHj80Ad9FXXK3stMYgqN8/u5MZcPrPbc+r7KSFmX:lriL2OAMlyE9FXXOk3f8/urrPZrmZ
- MD5 SHA1 SHA512 SSDEEP
RPS420 RAT/Flags/bt.png
- SHA256 1349d00831d7f7b4baa8f019a741eb8a1b13e6e52cfb48e118926a47229f0c3e
- MD5 7bffd5401e33ccd47291f9e3bf435194
- SHA1 bca7ab25876fb9d33cd3a85d99008cf27f98362d
- SHA512 6c2970ffd9c4a7d4dd13fc76d0b2e02e5a93e30f28568ddcca070674edc6212ef288eeac36421ce1ea1b5a4c5e41914af27947484a4b8fce2b4b3ef49fedc547
- MD5 SHA1 SHA512
test/Sheet rat v2.5.exe
- IMPHASH 027ea80e8125c6dda271246922d4c3b0
- SHA256 d4aa01539277d67f71d6ed2eb3fe8a951d719e2f1e9e397c5c6bffdb47fd93c3
- MD5 b6927a4a6edc2093c3f1d8b44f32a82e
- SHA1 7ce3055ebbace940dc3663a34df39902202955ca
- SHA512 d1f9a08d4e78735eae16a0b33f764515b76aaf2929ca8a77a2592f4ea5c3950064059286c552619a4602eb443b46a24f9b712dde6cc3f81ba4a66699467ba96b
- SSDEEP 786432:y7j7/GcueStkYIa7ZRMSQ7pyPruBaxlMlRK4cqP/pxCey/I5GqCCZrXSgW:gLGReSwE/MnanulRK4lHbCeFGBCtA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
789798
Minor OS version
1
Major OS version
5
Entry point
117429
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
Name
.text
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=139, id=243, version=40116,
count=24, id=242, version=40116,
count=22, id=259, version=23907,
count=19, id=260, version=23907,
count=45, id=261, version=23907,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=248, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
test/Spyder Crypter.sfx.exe
- IMPHASH 027ea80e8125c6dda271246922d4c3b0
- SHA256 727a61f2e39f6eeca5b1ec0655cfaf9f6b840c7cd1d40dcdc117ba3a750ea222
- MD5 1aaa01ff813432888ff886f3ce7bb1db
- SHA1 ac83f080e86302766475e8175e97dcc4640e6d59
- SHA512 c620434ce5f75ef05968ec7d85759111809c2d287b9480fb4a1ce24f278c7067493093b7fa16cbe3d87429aca2c3454f4bf65077cdae18d507cdb47c5ef47be0
- SSDEEP 98304:JLH5X9nDFHgsC8he/qwKnDgPeL2MOg4iwOjgVaIFiQC5wnhc67ZhDALLU9:JrV9DJNTJOMO9uj6F9CuigY8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
789798
Minor OS version
1
Major OS version
5
Entry point
117429
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
Name
.text
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=139, id=243, version=40116,
count=24, id=242, version=40116,
count=22, id=259, version=23907,
count=19, id=260, version=23907,
count=45, id=261, version=23907,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=248, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,